Senior Data Engineer

Find and label personal data. Identify every table and field in BigQuery that holds personal data, and tag it by sensitivity. How should we mask the data and show it to business in reporting via Tableau as per allowed guidelines.

Protect it by default. Hide or mask personal details for everyday users. Keep only what is needed, use it only for its stated purpose, and delete it when it is no longer needed or when a person asks. How can we enable this in both BigQuery and Tableau and data excel exports. (E.g most of our analysis is by Pan and GSTIN which business users want to see)

Role-based access (RBAC). Each role sees only its data, separated by legal entity (JOPL / JODL), region and business unit. Business users see only final reports, never raw data. The same rules must carry through to Tableau. How can we apply RBAC if we want to expose BigQuery data to AI layers like Claude, GPT

Activity trail. Record who accessed or changed what. Store these records securely in India, tamper-proof, for at least one year.

Alerts. Raise alerts for unusual activity, such as viewing unmasked personal data, very large downloads, customer sensitive data downloads, changes to access rights, or access from unknown locations. (Both from BigQuery and Tableau)_

Incident playbook. Provide a ready process to meet CERT-In's 6-hour reporting window and DPDP notification duties.

Data. Dynamic Data Masking based on RBAC , Data Encryption, , Key Rotations , Secure AI access , Incident Report and Regulatory Reporting

Handover. Deliver documentation, training and runbooks so our team can run the setup independently post completion.